Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa
File:                     7f418109-56e8-36f2-bd16-6a8f22da6670.roa (raw, json)
Hash identifier:          5716vfcv8aSZXbAydjVlaqzur1oV3+c0gna7fYACi5g=
Subject key identifier:   B8:D2:A7:53:6C:2C:67:CE:AB:B3:1C:34:09:A3:06:48:11:55:47:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849648469EB06C33C0C330DD180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.245.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:69:eb:06:c3:3c:0c:33:0d:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=60a92ade-b8c7-45f3-a1b9-098967f0244f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:e9:64:c1:e3:6a:27:20:c3:d4:76:a7:cc:
                    88:10:7d:90:93:2b:7f:ca:83:ba:c3:17:33:36:97:
                    f4:86:92:d9:f5:31:c1:21:16:42:6b:58:46:25:62:
                    35:e3:d5:15:89:bf:61:87:b4:65:b4:dd:7c:31:1e:
                    da:9e:be:e6:65:ff:5d:f5:ee:f6:18:56:73:00:3d:
                    c1:af:74:9d:7b:56:f6:d0:16:8c:ad:63:91:c8:61:
                    3b:02:1a:33:db:f8:a0:37:d0:a8:b4:0f:13:84:99:
                    7f:7d:ad:b8:f1:27:79:55:d3:72:af:05:33:8b:81:
                    ea:9e:06:f3:83:c3:4e:6d:32:02:91:bb:6b:54:a8:
                    7c:d4:47:52:6a:b6:b3:f6:71:81:3c:bf:c1:f0:25:
                    af:8d:ad:95:81:21:69:fa:b0:9f:7e:26:d3:6f:23:
                    31:4c:37:a2:ea:47:d7:d9:75:f0:78:21:84:0e:2b:
                    d4:bb:22:8f:dd:1e:e2:95:19:e5:59:0d:61:7a:d4:
                    c5:20:47:ba:a6:e5:9f:ff:fc:4c:cb:cd:85:13:71:
                    3e:66:c2:3c:22:db:81:aa:ef:f4:de:07:71:07:da:
                    d4:fe:cc:db:29:ae:c0:74:02:b0:2b:e1:79:3e:11:
                    b0:00:9b:a7:eb:d0:6d:e8:fc:50:47:13:51:4d:23:
                    84:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D2:A7:53:6C:2C:67:CE:AB:B3:1C:34:09:A3:06:48:11:55:47:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.245.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:c0:c3:22:6c:33:f3:17:f7:ca:ca:c6:7d:9f:99:f9:dd:
         67:43:c1:df:5f:b5:ba:81:7f:9a:0e:c7:62:34:28:98:58:26:
         af:4a:68:87:2b:78:28:f0:3c:0d:ac:41:a8:d7:ea:9a:a5:d5:
         0b:6e:9b:c4:57:af:02:22:a8:4f:3e:9c:45:76:2e:91:3f:43:
         25:50:6e:9a:8e:f1:4c:e5:74:0f:d3:aa:60:61:59:3c:21:7b:
         8b:dd:9a:6a:14:35:bc:d6:a6:c9:41:7c:5a:14:b8:32:e0:8f:
         52:ae:df:22:54:32:6e:8a:07:55:45:f6:6f:d8:b3:4e:32:28:
         21:94:56:72:f3:74:19:52:e1:c4:85:c5:36:36:c2:e8:ad:e5:
         93:a0:f8:3f:e4:73:da:e8:a0:3e:01:c5:ab:c1:f6:e0:8b:20:
         b5:71:f7:10:4d:db:21:94:35:24:50:95:3c:53:b9:6c:50:83:
         f6:ec:3b:24:d1:ac:c8:55:1c:02:3f:88:1a:84:28:e4:84:10:
         76:33:30:96:9b:b8:24:83:28:36:d7:95:64:c3:57:64:37:6d:
         a1:7e:ed:06:69:f5:84:0e:27:70:a2:8d:fd:f4:d2:10:8e:bc:
         c7:b7:1c:61:41:3d:b6:04:88:b7:82:7b:f7:6c:e4:9b:ca:7b:
         bc:e6:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:48:31 2025 by rpki-client